This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft File: r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft (raw, json) Hash identifier: 0HZnSuiSa8jWIJC488zP+wjfoZ389T2UTKn/wy/w51k= Subject key identifier: D2:54:87:60:ED:69:A9:AA:A2:B2:A1:06:F0:D8:13:31:56:DB:98:95 Authority key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99 Certificate issuer: /CN=aff3596546d4620b02a9642f08b77cfe6502ae99 Certificate serial: 019AF2091E5197D3A10B4C6792FECA4C1430 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 05:01:15 +0000 Manifest this update: Sat 06 Dec 2025 05:01:15 +0000 Manifest next update: Sun 07 Dec 2025 05:01:15 +0000 Files and hashes: 1: r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl (hash: DElfHze1NDUXQpY9icg/ygJ7RAgY8Eia8NPM2kEJQDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1e:51:97:d3:a1:0b:4c:67:92:fe:ca:4c:14:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff3596546d4620b02a9642f08b77cfe6502ae99 Validity Not Before: Dec 6 05:01:15 2025 GMT Not After : Dec 7 05:01:15 2025 GMT Subject: CN=d2548760ed69a9aaa2b2a106f0d8133156db9895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:20:af:67:f7:67:44:e5:b3:ce:26:1f:63:1b: fc:16:f2:f1:82:86:05:da:01:30:43:20:c1:8e:4b: c4:64:f3:ed:f0:16:7f:4b:6f:3d:68:c3:5d:b0:e5: 98:d3:b6:59:a0:0c:c3:84:ac:1a:9a:fc:7f:d5:ef: 77:92:16:5f:93:d0:00:f5:cc:b9:de:9f:36:19:1a: 7e:5f:9f:97:63:38:37:4a:24:52:8c:68:2e:c2:84: 42:5e:91:e5:2d:a3:27:0a:c4:1a:66:72:8a:62:c2: 3e:12:43:c3:fe:65:eb:55:16:9f:6b:44:4d:8b:f6: f9:74:3a:cb:0c:4a:c7:4f:35:bf:e0:7f:c4:1c:b0: fc:ab:80:27:d9:be:07:ad:c8:d0:2c:57:d9:36:cc: fb:0f:16:fb:3d:8e:da:ba:09:3e:49:4b:b4:39:91: e1:f7:d0:1b:8a:ee:89:64:30:2b:0d:fd:14:7d:ab: da:43:3b:ab:4a:87:90:ff:7f:2d:61:f1:e5:74:b5: b4:5d:c6:fa:0d:59:14:de:97:83:5a:a1:a1:e3:b7: 4e:75:5d:77:27:86:4c:8f:93:d6:23:d8:b8:f8:95: 4f:43:42:36:9a:0d:06:4d:50:7a:c0:a3:fc:3a:bf: 8a:ac:af:0d:09:70:e1:12:de:3b:8d:46:1d:6b:10: b7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:54:87:60:ED:69:A9:AA:A2:B2:A1:06:F0:D8:13:31:56:DB:98:95 X509v3 Authority Key Identifier: keyid:AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e1:fd:4d:95:9b:71:92:04:1a:93:a0:54:f3:07:aa:60:e4: e3:bd:f5:31:56:b1:d6:6d:b7:88:68:25:57:92:1e:5b:86:49: d7:da:1f:9e:23:b5:d4:dc:50:39:82:c5:a8:f2:d9:84:7a:24: 34:2a:80:ca:19:f9:ba:c7:d8:1e:2f:4a:12:c7:f4:41:d9:6c: aa:07:a8:f2:b1:89:15:64:bb:4a:d6:d5:8e:2b:eb:0f:a1:ef: 2e:58:b8:8b:12:64:f0:fc:75:3b:66:43:58:7d:a8:d4:ba:9e: d1:f9:23:71:43:fa:ec:2a:51:63:92:e7:d0:8f:9f:4e:3e:6a: 25:11:0e:2b:a1:2d:7d:e2:55:1b:a3:07:e4:e5:94:ca:ca:7b: ea:cc:13:b5:1c:3d:37:33:a4:6f:2f:db:da:dc:ab:16:e7:fd: 54:b6:6f:4a:26:49:79:ea:fe:8e:4a:39:77:ea:8a:e4:df:8b: 0c:a1:a9:a6:09:eb:0a:73:f1:32:97:a6:d1:51:0b:ee:99:e2: e6:1d:3a:b7:11:34:b5:5b:22:e1:09:e0:40:c9:60:ea:fb:df: 77:ea:57:04:d8:c9:b6:80:f3:43:88:3f:8e:1f:eb:67:0e:d2: 9f:8f:a8:43:1d:7f:05:f8:6f:6b:ea:00:21:e9:98:d7:5d:b6: 6a:dd:3a:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCR5Rl9OhC0xnkv7KTBQwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZjM1OTY1NDZkNDYyMGIwMmE5NjQyZjA4Yjc3Y2ZlNjUw MmFlOTkwHhcNMjUxMjA2MDUwMTE1WhcNMjUxMjA3MDUwMTE1WjAzMTEwLwYDVQQD EyhkMjU0ODc2MGVkNjlhOWFhYTJiMmExMDZmMGQ4MTMzMTU2ZGI5ODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCCvZ/dnROWzziYfYxv8FvLxgoYF 2gEwQyDBjkvEZPPt8BZ/S289aMNdsOWY07ZZoAzDhKwamvx/1e93khZfk9AA9cy5 3p82GRp+X5+XYzg3SiRSjGguwoRCXpHlLaMnCsQaZnKKYsI+EkPD/mXrVRafa0RN i/b5dDrLDErHTzW/4H/EHLD8q4An2b4HrcjQLFfZNsz7Dxb7PY7augk+SUu0OZHh 99Abiu6JZDArDf0UfavaQzurSoeQ/38tYfHldLW0Xcb6DVkU3peDWqGh47dOdV13 J4ZMj5PWI9i4+JVPQ0I2mg0GTVB6wKP8Or+KrK8NCXDhEt47jUYdaxC3HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJUh2DtaamqorKhBvDYEzFW25iVMB8GA1UdIwQY MBaAFK/zWWVG1GILAqlkLwi3fP5lAq6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wMjk5ZjQtZDAwZC00NTdjLWJiNjct MmFiOWFmOTM4NDM0LzEvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wMjk5ZjQtZDAwZC00NTdjLWJiNjctMmFiOWFmOTM4NDM0 LzEvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeH9TZWb cZIEGpOgVPMHqmDk4731MVax1m23iGglV5IeW4ZJ19ofniO11NxQOYLFqPLZhHok NCqAyhn5usfYHi9KEsf0Qdlsqgeo8rGJFWS7StbVjivrD6HvLli4ixJk8Px1O2ZD WH2o1Lqe0fkjcUP67CpRY5Ln0I+fTj5qJREOK6EtfeJVG6MH5OWUysp76swTtRw9 NzOkby/b2tyrFuf9VLZvSiZJeer+jko5d+qK5N+LDKGppgnrCnPxMpem0VEL7pni 5h06txE0tVsi4QngQMlg6vvfd+pXBNjJtoDzQ4g/jh/rZw7Sn4+oQx1/Bfhva+oA IemY1122at065A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:41 2025 by rpki-client